Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
File: MenbQitjczJSiuYo2dpQ5AOX-2Q.mft (raw, json)
Hash identifier: FZeUa3ka69GjdNkRamejB1tswPL3zBFPVKQXK2iVbZ0=
Subject key identifier: 4D:EF:86:88:96:8F:0A:97:25:FA:0B:CF:61:68:F7:7A:13:93:BC:8F
Authority key identifier: 31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
Certificate issuer: /CN=31e9db422b637332528ae628d9da50e40397fb64
Certificate serial: 01A1724B79DB89FF3E5AAE14E07C423394C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
Manifest number: 06D1
Signing time: Sun 25 Oct 2026 09:01:51 +0000
Manifest this update: Sun 25 Oct 2026 09:01:51 +0000
Manifest next update: Mon 26 Oct 2026 09:01:51 +0000
Files and hashes: 1: BPUT4UE35vAa6FgkFw-YniBw3xA.asa (hash: gf2KGpAYdtFaCwmtN3TVvfevrtYOru2nxq8rEg3OcDE=)
2: MenbQitjczJSiuYo2dpQ5AOX-2Q.crl (hash: VWU4HLbM4B2KwyFvCQEAKBkpwKRgdDAYBFueU8v8Nb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:4b:79:db:89:ff:3e:5a:ae:14:e0:7c:42:33:94:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e9db422b637332528ae628d9da50e40397fb64
Validity
Not Before: Oct 25 09:01:51 2026 GMT
Not After : Oct 26 09:01:51 2026 GMT
Subject: CN=4def8688968f0a9725fa0bcf6168f77a1393bc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:38:1b:67:0a:58:77:31:0f:5c:24:80:33:
36:22:4f:c7:c8:45:9d:f4:8d:cf:3c:09:45:07:fe:
67:93:d3:b3:77:b0:15:a8:97:f3:50:d8:e7:df:65:
9c:ae:09:9b:c8:3d:a8:c1:92:7e:8b:69:10:3d:30:
49:94:0f:09:12:bf:d5:d9:fe:02:19:61:a1:6f:39:
51:7e:cd:62:25:67:fe:63:9d:93:6e:60:73:b7:f2:
5f:af:c3:0b:1b:ee:7f:f4:8c:70:21:bd:05:22:80:
f2:61:96:f3:86:8b:ec:64:c3:c9:2f:be:f1:dc:c8:
c8:95:46:10:92:27:a2:23:53:eb:72:53:fb:0d:69:
2b:9e:be:62:c0:21:b1:0c:cd:65:e5:79:a1:73:38:
bd:9a:4e:f2:50:7b:ad:e8:71:99:8b:15:3c:25:14:
6f:12:3e:2c:6d:32:56:59:90:45:ce:a3:48:37:f7:
6b:88:db:19:95:76:53:9a:88:d3:0e:82:58:bf:aa:
d1:d4:f3:4c:0b:68:bb:99:7e:4e:2e:b4:9d:b4:5d:
cf:23:0f:8e:d7:a7:6a:82:27:e4:fb:0a:3c:75:aa:
4b:27:52:a0:a9:c0:2b:dc:53:25:6f:1e:da:a0:f4:
06:2b:d2:29:87:4b:ed:d6:b2:8c:4e:94:38:10:c5:
e5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EF:86:88:96:8F:0A:97:25:FA:0B:CF:61:68:F7:7A:13:93:BC:8F
X509v3 Authority Key Identifier:
keyid:31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5b:ff:81:dc:4b:5e:9d:e9:63:7c:24:6d:a1:e2:c1:8f:2b:
ae:a7:47:5e:33:90:36:e9:9f:0b:e6:30:66:72:93:14:51:09:
42:8e:28:6a:0c:c9:b0:18:3a:eb:6a:95:08:f5:78:31:fc:22:
cb:05:2a:7e:95:98:62:db:c2:19:7b:f4:18:6d:0a:54:2a:bc:
02:a7:2b:e4:1a:d3:87:c3:00:d0:f6:aa:bd:33:55:7b:19:5e:
d4:9f:76:8e:71:7f:33:88:92:bd:53:2e:e4:c2:a9:99:96:0d:
a3:b4:b3:83:ac:77:b4:96:0c:d6:86:58:a0:79:84:b5:2f:63:
51:66:38:b6:ca:07:52:61:3a:51:67:8f:f6:e3:08:6a:88:02:
ed:58:a6:d9:43:c0:bf:44:ce:f2:ad:b6:60:d4:a1:d9:7a:43:
5a:f9:e2:e1:b8:bb:ec:60:43:cf:7d:e3:a2:05:c4:53:f0:93:
0f:d1:6f:9d:37:0d:50:55:cc:b2:ff:65:6e:f6:a2:d2:fc:de:
b8:bf:d5:da:3a:38:67:85:65:d7:31:88:11:78:c9:c0:02:ec:
c6:19:f6:10:7e:52:2d:f9:cb:dd:42:82:61:9c:9b:78:ac:06:
df:f7:90:5c:f2:8f:9e:b1:58:db:35:df:02:bd:7a:ac:36:6b:
5a:e2:42:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFyS3nbif8+Wq4U4HxCM5TJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZTlkYjQyMmI2MzczMzI1MjhhZTYyOGQ5ZGE1MGU0MDM5
N2ZiNjQwHhcNMjYxMDI1MDkwMTUxWhcNMjYxMDI2MDkwMTUxWjAzMTEwLwYDVQQD
Eyg0ZGVmODY4ODk2OGYwYTk3MjVmYTBiY2Y2MTY4Zjc3YTEzOTNiYzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui44G2cKWHcxD1wkgDM2Ik/HyEWd
9I3PPAlFB/5nk9Ozd7AVqJfzUNjn32WcrgmbyD2owZJ+i2kQPTBJlA8JEr/V2f4C
GWGhbzlRfs1iJWf+Y52TbmBzt/Jfr8MLG+5/9IxwIb0FIoDyYZbzhovsZMPJL77x
3MjIlUYQkieiI1PrclP7DWkrnr5iwCGxDM1l5Xmhczi9mk7yUHut6HGZixU8JRRv
Ej4sbTJWWZBFzqNIN/driNsZlXZTmojTDoJYv6rR1PNMC2i7mX5OLrSdtF3PIw+O
16dqgifk+wo8dapLJ1KgqcAr3FMlbx7aoPQGK9Iph0vt1rKMTpQ4EMXloQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3vhoiWjwqXJfoLz2Fo93oTk7yPMB8GA1UdIwQY
MBaAFDHp20IrY3MyUormKNnaUOQDl/tkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNDk5NWYtOGE0NS00NWZiLTgxZjIt
MjAwMTc3OTkyNmNmLzEvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zNDk5NWYtOGE0NS00NWZiLTgxZjItMjAwMTc3OTkyNmNm
LzEvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlv/gdxL
Xp3pY3wkbaHiwY8rrqdHXjOQNumfC+YwZnKTFFEJQo4oagzJsBg662qVCPV4Mfwi
ywUqfpWYYtvCGXv0GG0KVCq8Aqcr5BrTh8MA0PaqvTNVexle1J92jnF/M4iSvVMu
5MKpmZYNo7Szg6x3tJYM1oZYoHmEtS9jUWY4tsoHUmE6UWeP9uMIaogC7Vim2UPA
v0TO8q22YNSh2XpDWvni4bi77GBDz33jogXEU/CTD9FvnTcNUFXMsv9lbvai0vze
uL/V2jo4Z4Vl1zGIEXjJwALsxhn2EH5SLfnL3UKCYZybeKwG3/eQXPKPnrFY2zXf
Ar16rDZrWuJCzA==
-----END CERTIFICATE-----
Generated at Sun Oct 25 18:48:23 2026 by rpki-client